- Conference Article
- 10.1109/ickg66886.2025.00060
Large Language Models for Anomalous Event Detection from Temporal Point Processes
- Nov 13, 2025
- Qinming Zhuang + 2 more +2
Event Sequence Anomaly Detection (ESAD) plays a crucial role in domains such as healthcare, DevOps, and information security, where identifying deviations from normal patterns in event sequences is essential for ensuring stability and mitigating risks. Despite notable progress, existing ESAD methods often struggle when handling continuous-time event streams. Statistical models such as Poisson or Hawkes processes offer efficiency but fail to capture nonlinear temporal dependencies, while deep learning methods demand large-scale labeled data and frequently suffer from poor interpretability. These limitations hinder their deployment in high-stakes applications where reliability and transparency are critical. To address these challenges, we introduce TPP-LLMAD, a novel framework that integrates Temporal Point Processes (TPPs) with Large Language Models (LLMs) for interpretable anomaly detection. In TPP-LLMAD, neural TPPs model event sequences and estimate intensity functions, which are then transformed into structured triplets of timestamps, event marks, and intensities. These representations are embedded into tailored prompts that guide an LLM to assess deviations, assign anomaly labels, and generate humanreadable explanations. By combining the quantitative rigor of TPPs with the interpretive capacity of LLMs, the framework bridges the gap between mathematical modeling and naturallanguage reasoning. Extensive experiments on real-world datasets demonstrate that TPP-LLMAD achieves performance comparable to or exceeding state-of-the-art baselines while providing explanations that enhance interpretability and usability. This work represents the first systematic integration of TPP intensity modeling with LLM-based reasoning for ESAD, advancing the frontier of interpretable event sequence analysis.
Read more